mirror of
https://github.com/pingcap/tla-plus.git
synced 2024-12-26 12:30:10 +08:00
Fix silly error in Coq proof.
This commit is contained in:
parent
5aee4f13c6
commit
7bf22a8151
@ -142,7 +142,7 @@ Inductive StateMultiStep : State -> State -> Prop :=
|
||||
StateMultiStep state state
|
||||
| StateMultiStep1 :
|
||||
forall state state1 state2,
|
||||
StateMultiStep state1 state2 ->
|
||||
StateStep state1 state2 ->
|
||||
StateMultiStep state state1 ->
|
||||
StateMultiStep state state2.
|
||||
|
||||
@ -275,7 +275,9 @@ Lemma Safety' :
|
||||
Invariant state ->
|
||||
Invariant state'.
|
||||
Proof.
|
||||
induction 1; crush.
|
||||
induction 1; intros.
|
||||
+ auto.
|
||||
+ eapply StateStepKeepsInvariant; eauto.
|
||||
Qed.
|
||||
|
||||
Theorem Safety :
|
||||
|
Loading…
Reference in New Issue
Block a user